[CLOUDSTACK-9369] Security issue! Local login open with SAML implementation

• Type: Bug
• Status: Resolved
• Priority: Critical
• Resolution: Fixed
• Affects Version/s: 4.5.2, 4.6.2, 4.7.1, 4.8.0
• Component/s: SAML
• Security Level: Public (Anyone can view this level - this is the default.)
• Labels: login loginmodule saml
• Environment: ACS 4.5.2; XS 6.2/6.5
• Flags: Important
• Cloudstack-CVSS: 7.5
• Assignee: Rajani Karuturi
• Reporter: Cyrano Rizzo
• Created: 26/Apr/16 13:58
• Updated: 19/Dec/17 10:52
• Resolved: 19/Dec/17 10:52

Description

All SAML enabled accounts can login localy with any password

Issue Links

• links to: GitHub Pull Request #2009